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WHAT IS CLAIMED IS: 

1 1 . A method for transforming one or more lists for a data 

2 commvmications system into a single list, each list of the one or more lists including a 

3 plurality of entries, the method comprising: 

4 removing non-terminating entries from the plurality of entries in the one or 

5 more lists, the removing each non-terminating entry removing all but a 

6 last non-terminating entry in any of the one or more lists; and 

7 eliminating from the plurality of entries one or more entries that provide for 

8 one or more impossible actions, wherein: 

9 the removing of non-terminating entries and the eliminating of one or 

10 more entries that provide for impossible actions, if any, 

1 1 produce a single list preserving tracing of the entries in the 

1 2 single list to the plurality of entries. 

1 2. The method of Claim 1 wherein each of the plurality of entries 

2 provides an indication of a source of the entry with an action code to create a pairing. 

1 3. The method of Claim 1 wherein the preserving tracing permits 

2 determining statistical parameters of the data communication system. 

1 4. The method of Claim 3 wherein the statistical parameters include 

2 counts of matched entries. 

1 5. The method of Claim 1 wherein the removing and the eliminating is 

2 performed at a network element of the data communication system. 

1 6. The method of Claim 1 wherein the list of entries is an Action Control 

2 List (ACL) and wherein each entry is an Action Control Entry (ACE). 

1 7. The method of Claim 1 wherein the one or more lists of data are action 

2 confrol Usts (ACLs), the method further comprising: 

3 combining at least a first and a second ACL by combining each non- 

4 terminating entry in a first ACL with each entry in a second ACL; and 
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5 rqjeating the combining recursively to a third or more ACLs, if present, until 

6 each ACL is collapsed into the first ACL to create the single list. 

1 8. The method of Claim 7 wherein the single list holds a plurality of 

2 Action Control Entries (ACEs) that are codeable into a first match engine capable of 

3 computing a large number of Boolean expressions in parallel and returning an index 

4 of first matching ACEs. 

1 9. The method of Claim 8 wherein the first match engine is implemented 

2 as one of a ternary content addressable memory (TC AM) and a hardware device 

3 capable of computing a large number of Boolean expressions in parallel and returning 
an index of first matching ACEs. 

10. A data routing system to administer entries, the data routing system 
comprising: 

a network element configured to receive a plurality of Action Control Lists 
(ACLs) organized to hold a plurality of Action Control Entries 
(ACEs); 

a processor configured to receive the plurality of ACLs holding the plurality of 
ACEs, the processor adapted to: 

remove any non-terminating entries from the plurality of ACEs in the 
plurality of ACLs, wherein the removal of each non- 
terminating entry removes all but a last non-terminating entry 
in any of the ACLs; and 
eliminate firom the ACEs one or more ACEs that provide for one or 

more impossible actions if present, wherein the removal of non- 
terminating entries and the elimination of one or more ACEs 
that provide for impossible actions produce a single list with 
entries, the single list configured to preserve tracing of the 
entries in the single list to the plurality of ACEs. 

1 11. The data routing system of Claim 1 0 further comprising: 

2 a hardware device coupled to receive the single list with entries, the hardware 

3 device being a parallel-first match engine. 
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1 12. The data routing system of Claim 1 1 wherein the hardware device is 

2 one of a content addressable memory and a ternary content addressable memory. 

1 13. The data routing system of Claim 1 1 wherein the single hst with 

2 entries is coded for presentation to the hardware device. 

1 14. The data routing system of Claim 10 wherein the one or more ACEs 

2 provide for a plurality of actions. 

1 15. The data routing system of Claim 1 0 wherein the one or more ACEs 

2 provide for one or more of: 

3 encryption and decryption, web caching, tunneling, redirection to a 

4 predetermined router interface, redirection to a separate processor or 

5 linecard for one or more of the encryption, decryption, web caching, 

6 and tunneling. 

1 16. A computer system comprising: 

2 a processor; and 

3 a memory, the memory including instructions, the processor for executing the 

4 instructions, the instructions including encoding instructions for one or 

5 more lists, each list including a plurality of entries, the encoding 

6 instructions including: 

7 skip entry removal instructions for removing non-terminating entries 

8 from the plurality of entries in the one or more lists, the 

9 removing each non-terminating entry removing all but a last 

10 non-terminating entry in any of the one or more lists; and 

1 1 impossibility entry elimination instructions for removing from the 

12 plurality of entries one or more entries that provide for one or 

13 more impossible actions, wherein the removal of non- 
14 terminating entries and the removal of one or more entries that 

15 provide for impossible actions produce a single list preserving 

16 tracing of the entries in the single list to the plurality of entries. 
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1 17. A computer program product, the computer program product 

2 comprising; 

3 signal bearing media bearing digital information adapted to include 

4 programming, the digital information including: 

5 a block configured to remove non-terminating entries firom the 

6 plurality of entries in the one or more lists, the removing each 

7 non-terminating entry removing all but a last non-terminating 

8 entry in any of the one or more lists; and 

9 a block configured to eliminate fi-om the plurality of entries one or 

10 more entries that provide for one or more impossible actions, 

1 1 wherein: 

3^ 12 the removal of non-terminating entries and the elimination of 

3 13 one or more entries that provide for impossible actions produce 

°^ 14 a single hst preserving tracing ofthe entries in the single list to 

,"!^ 15 the plurality of entries. 



1 1 8. A network element configured to transform one or more lists for a 

2 network, each list including one or more entries, the network element comprising: 

3 means for removing non-terminating entries firom the one or more entries in 

4 the one or more lists, the removing each non-terminating entry 

5 removing all but a last non-terminating entry in any ofthe one or more 

6 lists; and 

7 means for eliminating firom the one or more entries each entry that provides 

8 for one or more impossible actions, wherein the means for removing of 

9 non-terminating entries and the means for eliminating each entry that 

10 provides for impossible actions provide a means for producing a single 

1 1 list preserving tracing of the entries in the single list to the one or more 

12 entries. 
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